Privacy Policy
Last updated: June 23, 2026
Refract respects your privacy and is committed to protecting the personal data of everyone who visits this website or contacts us through it. This Privacy Policy explains what data Refract collects from visitors and inquiries, how it is used, and the rights you hold under the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL).
About Refract
Refract is a strategy advisory and management consulting service, licensed as a freelancer under the Ministry of Human Resources and Social Development (MHRSD), Freelance License FL-593613698, based in Riyadh, Saudi Arabia.
For the purposes of this policy, Refract is the data controller responsible for your personal data.
What Refract Collects
When you complete the Context Form, accessed via the "Start a Conversation" link on this website and hosted by Tally, Refract collects:
Your name
Your email address
Your phone number
Your company name
Any details you choose to share about your business situation and context or other reasons for your inquiry
This website does not use cookies, analytics, or tracking technologies.
Why Refract Collects It
Refract uses the information you provide to respond to your inquiry, understand your situation, and determine how to help. It will not be used for any other purpose without telling you first.
Legal Basis for Processing
Refract processes your data based on your consent, given when you submit the Context Form, and its legitimate interest in responding to business inquiries.
Third Parties
Refract does not sell or rent your personal data. To manage inquiries, schedule conversations, and support its work, Refract uses third-party tools that may process data on its behalf, including AI-based research and drafting tools. Any business context shared with AI tools is anonymized; personal identifiers such as your name, contact details, and company name are not passed to them. These tools may operate outside Saudi Arabia.
How Long Refract Keeps It
Refract keeps your information for as long as needed to respond to your inquiry and, if an engagement begins, for its duration and a reasonable period afterward for record-keeping. It is not kept longer than necessary.
Keeping Your Data Safe
Refract takes reasonable technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access.
Your Rights
Under PDPL, you have the right to:
Know what personal data Refract holds about you
Request a copy of it
Correct inaccurate data
Request deletion of your data
Withdraw your consent at any time
Object to certain uses of your data
File a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA)
To exercise any of these rights, contact Refract at info@enterrefract.com.
Changes to This Policy
Refract may update this policy from time to time. The effective date above shows when it was last revised. Continued use of this website after a change means you accept the updated policy.